Your network contains an Active Directory domain named contoso.com. The domain contains 100 user
accounts that reside in an organizational unit (OU) named 0U1. You need to ensure that a user named User1
can link and unlink Group Policy objects (GPOs) to OU1. The solution must minimize the number of
permissions assigned to User1.
What should you do?

A.
Modify the permissions on OU1.

B.
Run the Set-GPPermission cmdlet.

C.
Add User1 to the Group Policy Creator Owners group.

D.
Modify the permissions on the User1 account.

Explanation: